Unrated severityNVD Advisory· Published Oct 28, 2026
CVE-2026-110292
CVE-2026-110292
Description
The PayPlug for WooCommerce (Official) WordPress plugin before 3.1.1 does not verify that the requester owns the WooCommerce order named in a payment request, allowing unauthenticated users to disclose another customer's order key and cancel their unpaid guest order.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <3.1.1
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.